[log in to unmask] wrote:
> Hi Troy,
> 
> Possible pointer to a fix:-
> 
> [root@simpson SOURCES]# diff -up  freetype-2.3.5-CVEs.patch.orig freetype-2.3.5-CVEs.patch
> --- freetype-2.3.5-CVEs.patch.orig      2008-06-17 05:39:11.000000000 +0100
> +++ freetype-2.3.5-CVEs.patch   2008-06-24 17:24:06.000000000 +0100
> @@ -119,7 +119,6 @@ diff -up freetype-2.1.9/src/type1/t1pars
>        FT_UShort  tag;
>   -    FT_Long    size;
>   +    FT_ULong   size;
> -+    FT_ULong   dummy;
> 
> 
>        psaux->ps_parser_funcs->init( &parser->root, 0, 0, memory );
> 
> Making this change to freetype-2.3.5-CVEs.patch
> (i.e. removing " FT_ULong   dummy" line 122)
> recompiling and installing seems to have got inkscape and
> openoffice working OK.
> 
> cheers,
> Ronnie

Looks like the patch they have in the bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=452474
https://bugzilla.redhat.com/attachment.cgi?id=310151

I'll give them a bit of time to make their errata, hopefully they won't take 
too long or I'll have to make our own.  But it really looks like they've jumped 
on this one and a fix should be out soon.

Troy
-- 
__________________________________________________
Troy Dawson  [log in to unmask]  (630)840-6468
Fermilab  ComputingDivision/LCSI/CSI DSS Group
__________________________________________________